Superreader User Privilege Not Available on WF-500 Appliance

When configuring user privilege on WF-500 appliance, I notice there is no superreader user privilege.

But, when I checked from WF-500 appliance configuration documentation, there is superreader user privilege.

I cannot find a similar issues where sup

QUEST Tools "Error loading" 20/01/2026

Hi All,

We not able to access Quest Tools this morning and receive error as screenshot.

Please check if there issue on the backend.

Asymmetric Routing - Palo Edge Firewall Active/Passive to Nexus Core

We have (2) equal cost L3 links from our Nexus core switches to an upstream Palo edge firewall HA pair, active/passive. On the firewall, this is an aggregation ethernet with layer 3 subinterfaces defined.  There is an SVI on each Nexus switch for rou

Does User ID Agent 10.2.4 compatible with PAN OS 11.1.13?

I’m planning to upgrade my PA-440 from PAN-OS 10.2.8-h3 to 11.1.13.

Based on what I’ve read, PAN-OS 11.1.13 is not compatible with my existing User-ID Agent version 10.2.4. I tried upgrading the User-ID Agent to version 11.0.3, but I encountered an

PAN-OS 11.1.13 Predefined reports displaying IPv4 addresses in IPv6 format

We have been experiencing an intermittent problem with our nightly predefined reports displaying IPv4 addresses in IPv6 format.
An IPv4 address like 192.168.1.1 is being displayed as an IPv6 address like ::0101:a8c0:ffff:0

We are currently running P

Cortex XSIAM XQL: How to find incidents where playbook failed / errored?

I’m new to Cortex XSIAM and XQL, and I’m still learning how things work. I need some help with an XQL query.

I’m trying to create an XQL query where I can see: Incident ID, Incident name , Playbook execution status (failed / error), Playbook name, Er

How to Configure XQL to detect logs not reporting rule

I am able to retrieve logs successfully using XQL in Cortex XSIAM.

However,
I need to configure an analytics rule that triggers when any single expected source stops sending logs (for 10 minute,1 hours,4 hours).

• Detect when any one host / source stop

account activating

I did not activate my MFA, and now the link is not working.

any idea what to do ?

Multiple High/Critical Alert Detected via Port 18264 | Possible FP

Hi ,

i would like to seek clarification clarification regarding a threat detection observed on our Palo Alto firewall, which we believe may be a false positive. During our review of the threat log, we noticed that the detection from below source an

invalid password and username PA-VM 10

hi panel I recently downloaded the PA-VM 10. here are the characteristics RAM:6.5 processors:2 hard disk:60GB 2 network card in NAT 1a host-only card 1one in LAN segment I am still stuck at the login level I use admin admin at the login and password ...

recv rst from server or recv from zero win from server

I'm using Global Protect to connect to the server. When I open YouTube to watch videos or run a speed test, I always receive an RST packet or a zero window message from the server. Then the client disconnects from the VPN.  

I want to know what's cau

Prisma Browser – First-Time Login Issue Assistance Required

A first-time user is facing an issue while logging in to the Prisma Browser.

We request your assistance to help identify and fix this issue. Please let us know the required checks or steps from our end to resolve the first-time login problem.

Kindly

Update PANOS to 11.2.3-h3 from 10.2.12-h2

Hello,

I have 1 Panorama VM on 10.2.12.-h2

2 FW on 10.2.11-h2

Needing to update PANOS to 11.2.3-h3 due to support for some azure Firewalls net new. They are much higher version software than I have on prem so need to update PANOS so I can manage th

Windows Clients – Captive Portal Not Triggering with GlobalProtect Always-On Enabled

Hello everyone,

We are using a Captive Portal on our Palo Alto firewall at the headquarters. When users enter the building and connect to the wireless network, a Captive Portal pop-up is presented, and users gain internet access after entering their

powered down V-wire port

Good evening,

I'm working on a split site redundant network, where my PA-1410 is unable to pass traffic. from what I can tell the v-wire is hard wired to the designated ports (P9 -> P19), but P19 is listed as powered down, no SFP detection. It seems